Just came to my mind: should we cache `%w(password password_confirmation)` in a `password_attributes` (or sth like that) as well?